high7.5
CVE-2022-47188
There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version.
Impact
There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Generex | Cs141 Firmware | before 2.06 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.generex.de/support/changelogs/cs141/2-12
- https://www.generex.de/support/changelogs/cs141/page:2
- https://www.incibe-cert.es/en/early-warning/ics-advisories/update-03032023-multiple-vulnerabilities-generex-ups-cs141
- https://www.generex.de/support/changelogs/cs141/2-12
- https://www.generex.de/support/changelogs/cs141/page:2
- https://www.incibe-cert.es/en/early-warning/ics-advisories/update-03032023-multiple-vulnerabilities-generex-ups-cs141